Domain Reputation Protection

Protect your domains from impersonation..

Domain reputation is a measure that Internet Service Providers (ISPs) use to determine whether your emails can be trusted or not. Think of your email provider as Border Control, if you have the required paperwork and have not broken any laws, you are allowed to pass. If, however, you fail to produce your paperwork, or have broken the law, chances are you will be refused. Emails work in exactly the same way, if you have a poor reputation, your emails will be rejected. But how can you make sure your emails meet the regulations and improve your email delivery rates.

What Is SPF?

Sender Policy Framework (SPF) is used to authenticate the sender of an email. With an SPF record in place, Internet Service Providers can verify that a mail server is authorized to send email on behalf of a specific domain.

An SPF record is a DNS TXT record that contains a list of all the IP addresses that are allowed to send email on behalf of your domain.

SPF has become increasingly vital in the fight against email impersonation by helping to verify which sending infrastructure can relay email on behalf of your domain.

Why Add SPF to your domain:

Increased Domain Reputation

Improved Email Delivery

Reduces Domain Impersonation & Email Spoofing

One Of The Pillars Of DMARC

What Is DKIM?

Why Add DKIM to your domain:

Increased Domain Reputation

Improved Email Delivery

Protects Message Integrity

One Of The Pillars Of DMARC

DomainKeys Identified Mail (DKIM), is an email authentication method that uses a digital signature to let the recipient know that the message was authorized by the owner of the sending domain.

A DKIM record is a DNS record that contains the public key which receiving mail servers can use to authenticate the DKIM signature.

Once the receiver determines that an email is signed with a valid DKIM signature it can be confirmed that the email’s content has not been modified.

DKIM has become increasingly vital in the fight against email impersonation by helping to verify the integrity email content sent on behalf of your domain.

DomainKeys Identified Mail (DKIM), is an email authentication method that uses a digital signature to let the recipient know that the message was authorized by the owner of the sending domain.

A DKIM record is a DNS record that contains the public key which receiving mail servers can use to authenticate the DKIM signature.

Once the receiver determines that an email is signed with a valid DKIM signature it can be confirmed that the email’s content has not been modified.

DKIM has become increasingly vital in the fight against email impersonation by helping to verify the integrity email content sent on behalf of your domain.

Why Add DKIM to your domain:

Increased Domain Reputation

Improved Email Delivery

Protects Message Integrity

One Of The Pillars Of DMARC

What Is DMARC?

Domain-based Message Authentication Reporting and Conformance (DMARC) is a technical specification that is used to authenticate an email by aligning SPF and DKIM mechanisms. By having DMARC in place, domain owners can fight business email compromise, phishing and spoofing.

With DMARC you can tell the world how to handle the unauthorized use of your email domains by applying a policy in your DMARC DNS record.

In an ideal world, DMARC should be implemented with a reject policy to ensure your domain cannot cannot be impersonated.

Benefits Of DMARC:

Visibility Of Domain Use

Increased Domain Reputation

Reduces Domain Impersonation & Email Spoofing

Meet Compliance Regulations

DMARC Policies

DMARC Policies

None

Provides No Protection

Does Not Interrupt Email Delivery

Provides Visibility Through Reports

Quarantine

Provides Partial Protection

Fraudulent Mail delivered To SPAM Folder

First Major Step In DMARC Implementation

Reject

Highest Level Of Protection

Fraudulent Mail Will NOT Be Delivered

Rejection Notice Sent Back To Sender

Why Is This Important?

In February 2024, Google & Yahoo announced pretty major changes in the way they were going to handle emails. In short, they are insisting all sending domains must have, at the very least SPF & DKIM configured. Fortunately, our clients all have this, but they also stipulated that domains sending over 5000 emails per day required DMARC also.

Further to these changes, April 2024 will see Google & Yahoo enforcing DMARC for all sending domains, meaning that if you do not have DMARC configured in some form on your domain, emails may not delivered to their intended recipients.

Although Google & Yahoo have taken the lead on the guidelines it is expected that other email providers will follow suit, further increasing the need for correctly configured, monitored and manged DMARC policies.

How Can We Help?

DMARC, SPF, and DKIM are technical DNS records that are difficult to manage without experience, and misconfiguration of these records can cause email deliverability and reputation issues. To make things more complicated, there is a need to monitor and interpret the reports generated by DMARC, requiring a deep understanding of email authentication mechanisms.

Setting the right DMARC policy and understanding the implications of these settings is crucial for effective protection without disrupting legitimate email traffic. Misconfiguration can lead to legitimate emails being rejected or quarantined, disrupting business operations.

With our Managed DMARC service, we handle everything for you, from proper configuration, to report analysis and ongoing management.